CVE-2026-50214 | BDVDB-2026-338149 Detail
AcerConnect M6E 5G Portable WiFi Router
Description#
The /v1/Plan service relies entirely on a shared global API token for full administrative management, allowing arbitrary creation of zero-cost network access plans.
Impact#
CAPEC-233: Privilege Escalation
Weaknesses#
- CWE-345 Insufficient Verification of Data Authenticity
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.